1581 matches found
JLSEC-2025-202 A Lucky 13 timing side channel in `mbedtls_ssl_decrypt_buf` in `library/ssl_msg.c` in Trusted...
A Lucky 13 timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length...
PT-2025-47819
Name of the Vulnerable Software and Affected Versions Versions prior to 2025-11931 Description An integer underflow can lead to out-of-bounds access during decryption using XChaCha20-Poly1305. This occurs specifically when calling the wc XChaCha20Poly1305 Decrypt function, which is utilized by...
New Sturnus Android Trojan Quietly Captures Encrypted Chats and Hijacks Devices
Cybersecurity researchers have disclosed details of a new Android banking trojan called Sturnus that enables credential theft and full device takeover to conduct financial fraud. "A key differentiator is its ability to bypass encrypted messaging," ThreatFabric said in a report shared with The...
TencentOS Server 4: grub2 (TSSA-2025:0411)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0411 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
PT-2025-47514
Name of the Vulnerable Software and Affected Versions Twonky Server version 8.5.2 Description Twonky Server version 8.5.2 on Linux and Windows contains a cryptographic flaw due to the use of hard-coded cryptographic keys. An attacker who knows the encrypted administrator password can decrypt it...
EUVD-2025-179724
Malicious code in class-debug-private-decrypt-slow npm...
EUVD-2025-179763
Malicious code in char-alert-abstract-decrypt-test npm...
EUVD-2025-179372
Malicious code in decrypt-sun-mock-rain-debug npm...
EUVD-2025-176310
Malicious code in socket-decrypt-tau-big-compress npm...
EUVD-2025-176989
Malicious code in protected-reject-decrypt-bad-big npm...
EUVD-2025-179373
Malicious code in decrypt-info-meta-table-big npm...
EUVD-2025-178451
Malicious code in import-abstract-nu-private-decrypt npm...
MAL-2025-186509 Malicious code in decrypt-info-meta-table-big (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4883bdd1cd22e99353350c8cdb2c98e0bd344ac3801dc0999b5d205d66f663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180316
Malicious code in array-upsilon-decrypt-container-object npm...
EUVD-2025-176375
Malicious code in simple-file-omicron-function-decrypt npm...
EUVD-2025-179371
Malicious code in decrypt-xml-compress-moon-file npm...
EUVD-2025-178900
Malicious code in final-uglify-decrypt-enum-data npm...
EUVD-2025-175819
Malicious code in unix-earth-zero-decrypt-log npm...